ABA Practice Management Software: What Each One Actually Publishes
Fourteen ABA platforms recorded against five checkable columns — documented modules, published pricing, named integrations, stated compliance, and public API documentation. Every cell sourced to the vendor's own website.
Most comparison pages in this category rank things. This one records things.
The problem with ranking ABA software is that the inputs are largely unavailable. Nobody publishes churn or uptime histories, and satisfaction data in this market is thin and self-selected. What is available — and what almost nobody assembles — is the set of claims each vendor makes in public, on its own website, in language its own counsel approved. That is a real dataset, checkable by you in an afternoon, and it separates these platforms more sharply than any star rating would.
So this page records what fourteen ABA platforms publish about themselves across five columns, with the date we checked. Every cell below was read on the vendor’s own site on 6 August 2026. Nothing comes from a review aggregator, a listicle, or a forum. Where we could not find something, the table says we could not find it — a statement about our search, not about the company. Our methodology is public, we take no vendor payment, and there are no affiliate links on this site.
The table
Modules = capability areas the vendor names in its own product navigation. Pricing = whether a rate appears on the vendor’s site. Integrations = whether a page names integration partners. Compliance = certifications or attestations the vendor states. API = whether public API documentation exists.
| Platform | Modules documented | Pricing published | Named integrations page | Stated compliance | Public API docs |
|---|---|---|---|---|---|
| CentralReach | Practice management, data collection, billing, RCM (BillMax), scheduling AI, note drafting/auditing AI, claim AI, assessments, LMS/CEUs, caregiver training | No · contact vendor | Yes — 7 named partners | HIPAA (BDO), SOC 2 (BDO), FERPA, PCI, EU/UK/Swiss Data Privacy Framework, GDPR, PIPEDA | Yes |
| CR Essentials | Data collection, scheduling, billing, payroll, HR, documents/e-signature, caregiver portal, AI session summary | No · contact vendor | Not found | Covered by CentralReach security page | Not found |
| Rethink Behavioral Health | Practice management, scheduling, data collection, billing software + services, BillAI, Session Note AI, AI dashboard, analytics, training, ParentHub, medical necessity assessment, Marketplace | No · contact vendor | ”Marketplace” — partners not enumerated | HIPAA; HITRUST CSF mark; published information-security standards page | Not found |
| Motivity | Data collection, practice management, scheduling, progress reports, intake, credentialing & contracting, RCM services | Yes | Yes — categories published | HIPAA; SOC 2 Type II | Not found |
| AlohaABA | Practice management, scheduling, billing, payroll, authorization management, AR, compliance tracking, data collection | Yes | Yes — 8 named partners | BAA published; no security page found | Not found |
| Theralytics | Scheduling, billing, data collection, reporting/analytics, documentation management, mobile app, billing services | Yes | Not found | HIPAA; SOC 2 Type II (A-LIGN), stated “no exceptions” | Not found |
| Raven Health | Data collection, scheduling, practice management, managed billing, self-billing, credentialing, AI capabilities | Yes | Not found | Not found on site | Not found |
| Portia | Data collection, practice management, insurance billing (full and self-service), curriculum, AI session summaries | Yes | Add-ons named (SMS, Box.com); clearinghouse | HIPAA stated on feature pages | Not found |
| Noteable | Clinical documentation, ABA data suite, scheduling, authorizations, telehealth, client portal, RCM | Yes | Not found | HIPAA stated | Not found |
| Hi Rasmus | Data collection, curriculum, treatment planning, supervision & telehealth, scheduling, RBT/IBT training, staff competency, outcomes reporting, session auditing | No · contact vendor | Yes — 5 named partners | Trust center: HIPAA, GDPR, CCPA/CPRA, LGPD, PIPEDA; PCI DSS Level 1 via Stripe | Webhooks documented; no public API docs found |
| Artemis ABA | Clinical dashboards, VB-MAPP, treatment plans, data collection, session notes, scheduling, claims, denial management, AR, parent portal, AI notes & plans | Yes | Not found | ”HIPAA-compliant workflows” listed as plan feature | Listed as plan feature |
| Passage Health | Intake, scheduling, data collection, session notes, claims & billing, automated graphing, reporting | No · contact vendor | Not found | ”HIPAA compliant document management” | Not found |
| Lumary | Client management, scheduling, billing, authorization management, employee & credential tracking, analytics, compliance/audit reporting, payments, claiming & invoicing | No · contact vendor | ”Partners & Integrations”; clearinghouse integration | ”Enterprise-grade security”; built on Salesforce | Not found |
| Office Puzzle | Data collection, documentation, scheduling, billing, payroll, compliance | Yes | Not found | BAA published | Not found |
Reading the pricing column
Eight of fourteen publish a rate. That is the single most useful fact on this page, and it has a consequence buyers routinely miss: published rates are not comparable to each other, because the vendors are not selling the same unit.
Three units are in use. Some platforms price per staff seat: Office Puzzle at $19.99 per user per month, AlohaABA at $29.99 per staff member per month, Artemis ABA’s Emerging plan at $39.99 per user per month. Some price per client or learner: Motivity at $24 per learner per month for data collection, $24 for practice management, and $48 per learner for the combined platform; Portia at $30 per client per month; Raven Health’s standalone software plan at $29 per learner per month. Theralytics publishes both, letting the buyer choose the basis — $20 per client or $30 per user for a single module, $30 per client or $45 per user combined. Noteable prices in blocks: $300 per month including the first five users, with additional users tiered. And several vendors publish a percentage-of-collections option instead of, or alongside, a software fee — Noteable’s Elite plan at 3.9% of monthly collections, Raven’s Premium All-In-One at 5% of monthly claims paid, Portia’s full-service billing at an unstated percentage of claims paid.
The practical effect is that the cheapest platform on paper changes completely depending on the shape of your practice. A caseload-heavy practice with few staff pays more on learner-based pricing. A staff-heavy practice with a small caseload pays more on seat-based pricing. Any list that ranks these by headline price is comparing different things.
The six that do not publish are not doing anything unusual — quote-only is a normal enterprise software posture, and it is how the largest platforms in most healthcare verticals operate. It does mean your budget conversation starts with a demo, and that you should ask for the renewal number, not just the first-year number, in writing.
Reading the compliance column
Three vendors state a third-party attestation with the auditing firm named: CentralReach (SOC 2, verified by BDO, alongside an annual HIPAA assessment by the same firm), Motivity (SOC 2 Type II), and Theralytics (SOC 2 Type II conducted by A-LIGN, described as completed with no exceptions). Rethink Behavioral Health displays a HITRUST CSF certification mark and publishes a detailed information-security standards page describing AES-256 encryption at rest, TLS 1.2 in transit, and hourly incremental backups.
CentralReach’s page is the broadest in scope, adding FERPA — relevant if you contract with school districts — PCI, and acceptance into the EU-U.S., UK, and Swiss Data Privacy Framework programs, which matters if any of your data crosses a border.
Everyone else states HIPAA compliance in some form. HIPAA compliance is a legal obligation, not a certificate; no federal body certifies it. That is why a named third-party attestation is the more informative signal, and why it belongs in its own column. If your payer contracts or your own security review require a SOC 2 report, ask for the report under NDA rather than accepting a page. Several vendors here may hold attestations they have not published; the table records what is publicly stated on the date we checked, not what exists.
Reading the API and integrations columns
CentralReach is the only vendor in this set publishing developer-facing API documentation openly — OAuth 2.0 client-credentials authentication, JWT tokens, REST conventions, response codes, and reference tables — with the page stating that credentials are provisioned through a CentralReach representative. Artemis ABA lists API access for third-party systems as an included plan feature. Hi Rasmus documents webhooks for triggered events and describes connecting to external scheduling and practice-management systems, without publishing general API documentation.
For the other ten, we found no public API documentation. That does not mean no integration path exists — most of these platforms clearly move data to clearinghouses, payroll systems, and EVV aggregators. It means that if a bespoke integration is central to your plan, you are asking for something that is not documented publicly and you should get the answer in writing before signing.
On named partners, the counts are small everywhere. CentralReach’s partners page names seven preferred technology partners: Simple Fractal, Collectly, LeadSquared, Nuvei, Apploi, Viventium, and Rain. AlohaABA names eight, including Ensora Health, Hi Rasmus, Twyll (marked coming soon), Stripe, Sandata, Availity, and TheraDriver. Hi Rasmus names five: Camber Health, Lumary, Aloha ABA, Therapy PMS, and Boost. Motivity publishes its ecosystem organized into eight categories — clearinghouse, data and business intelligence, EVV, financial, human resources, payment processing, practice management, and training — though individual partner names did not render in the page source we retrieved.
What this table cannot tell you
It cannot tell you whether an RBT will fight the mobile app on a Tuesday afternoon in a client’s living room. It cannot tell you how a claim denial workflow feels at 300 claims a month. It cannot tell you what your quote will be.
Use it as a demo agenda instead. Take the three modules you would live in daily, and make each vendor run them against your programs, your payer mix, and your authorization patterns — not the sandbox data in their deck. Ask the pricing questions in the unit that matches your growth: if you are adding clients faster than staff, learner-based pricing scales against you, and vice versa. Ask what the renewal looks like. And if you are switching rather than starting, read what migration actually involves before you fall in love with anything.
Two structural notes worth carrying into any evaluation. First, this category is consolidating: Motivity announced on 22 June 2026 that it had signed a definitive agreement to acquire Calmanac, and the ABA products formerly marketed under Therapy Brands now sit under Ensora Health, whose public site currently features its mental-health and rehab-therapy products — we tracked that in detail here. Second, vendor sites change. Every fact above is dated 6 August 2026. Check the cell that matters most to you before you sign.
Corrections are welcome from anyone, and most welcome from the vendors named here. If we have recorded something inaccurately or your site now says something different, write to [email protected] and we will verify and update.
Frequently asked
Which ABA practice management platforms publish their pricing?
As of 6 August 2026, eight of the fourteen platforms we checked publish at least one rate on their own site: Office Puzzle, Motivity, AlohaABA, Theralytics, Raven Health, Portia, Noteable, and Artemis ABA. CentralReach, CR Essentials, Rethink Behavioral Health, Hi Rasmus, Passage Health, and Lumary do not publish pricing — contact vendor.
Which ABA platforms publish public API documentation?
CentralReach publishes API documentation at centralreach.com/resources/api/, covering OAuth 2.0 client-credentials authentication, response codes, and endpoint references; the page states that access credentials are provisioned through a CentralReach representative. Artemis ABA lists 'API access for 3rd party systems' as an included plan feature on its pricing page. Hi Rasmus documents webhooks on its integrations page. We did not find public API documentation on the other ten vendors' sites.
Which ABA platforms state a SOC 2 attestation?
CentralReach states it has completed a SOC 2 audit verified by BDO. Motivity states it has completed a SOC 2 Type II audit. Theralytics states it completed a SOC 2 Type II audit with no exceptions, conducted by A-LIGN. Rethink Behavioral Health displays a HITRUST CSF certification mark. Other vendors we checked state HIPAA compliance without naming a SOC 2 or HITRUST attestation.
Does a longer feature list mean a better platform?
No. A feature list records what a vendor documents, not how a capability performs in your workflow. Use the table to build a demo agenda: take the three modules you would actually live in daily and require the vendor to run them against your programs, your payer mix, and your authorization patterns.
Spotted something stale? Every entry shows when we last checked it. If a link is dead or an offer changed, tell us and we'll fix it.
Report a change